Loading HuntDB...

GHSA-4cmx-hrq9-c23p

GitHub Security Advisory

Improper Authorization in aedes

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

Versions of `aedes` before 0.35.1 does not respect its own authorization rules when a client sets a `Last Will`.

## Recommendation

Update to version 0.35.1 or later.

Affected Packages

npm aedes
Affected versions: 0 (fixed in 0.35.1)

Related CVEs

Key Information

GHSA ID
GHSA-4cmx-hrq9-c23p
Published
August 15, 2018 8:03 PM
Last Modified
April 21, 2023 6:30 PM
CVSS Score
5.0 /10
Primary Ecosystem
npm
Primary Package
aedes
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 2, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.